io.github.cyanheads/bluesky-mcp-server
io.github.cyanheads/bluesky-mcp-server
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/fc80b1bd-7f51-4952-b1f4-f790dc5fcc1f/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "io.github.cyanheads/bluesky-mcp-server"
title: null
description: "Search Bluesky posts and feeds; read profiles, threads, and trends. STDIO or Streamable HTTP."
version: "0.8.0"
homepage_url: null
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "io.github.cyanheads"
display_name: "io.github.cyanheads"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/cyanheads/bluesky-mcp-server"
provider: "github"
owner: "cyanheads"
name: "bluesky-mcp-server"
verified: false
packages[2]
0{4}
registry_type: "npm"
identifier: "@cyanheads/bluesky-mcp-server"
version: "0.8.0"
transport: "stdio"
1{4}
registry_type: "npm"
identifier: "@cyanheads/bluesky-mcp-server"
version: "0.8.0"
transport: "streamable-http"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "streamable-http"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://bluesky.caseyjhand.com/mcp"
endpoint_host: "bluesky.caseyjhand.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[11]
0{9}
name: "bsky_get_author_feed"
title: "Get Bluesky Author Feed"
effect: "READ"
effect_confidence: 0.888
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.705
1{2}
capability: "PERSONAL_DATA"
confidence: 0.849
risk_severity: "LOW"
fingerprint: "074215dbed90740d0ac59ee1e22b5bc708659a586cfcdd6451b8ed38a608699b"
input_schema_fingerprint: "60cc61dc3703ec5bff2048058b4b6d4ed4709fd82fc1ee12139013c2005fe13f"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
1{9}
name: "bsky_get_feed"
title: "Get Bluesky Feed"
effect: "READ"
effect_confidence: 0.905
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.749
1{2}
capability: "PERSONAL_DATA"
confidence: 0.652
risk_severity: "LOW"
fingerprint: "41f2caa17377164484ec5d0aad8de73e2ce9d868f6d5f8f477f41ea6917ac7b1"
input_schema_fingerprint: "b124910d315d9e2df1fae9213dfb7c3c4cb5367c7be5f0e248d78e2ab0c16c33"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
2{9}
name: "bsky_get_follows"
title: "Get Bluesky Social Graph"
effect: "WRITE"
effect_confidence: 0.575
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.539
1{2}
capability: "PERSONAL_DATA"
confidence: 0.748
risk_severity: "MEDIUM"
fingerprint: "cd672841c1aac7d3f74682cf55b600c8de195b28985ac937a59d06f9c934b52b"
input_schema_fingerprint: "ed0cb7a71246c61864bee8ced70ffa5b5ed30bd355bb471e925d2a49430c2311"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
3{9}
name: "bsky_get_list"
title: "Get Bluesky List or Starter Pack"
effect: "READ"
effect_confidence: 0.905
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.872
1{2}
capability: "PERSONAL_DATA"
confidence: 0.922
risk_severity: "LOW"
fingerprint: "3f0809d9b9543a207ab88ffcd3c960ccbb1d0fb648c4e54d9881c1d8b6841af5"
input_schema_fingerprint: "505d61b6d1965fb68f4c66aeaefd060b6470315bf99e448c39c7bdf9081ab07b"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
4{9}
name: "bsky_get_post_interactions"
title: "Get Bluesky Post Interactions"
effect: "READ"
effect_confidence: 0.888
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.796
1{2}
capability: "PERSONAL_DATA"
confidence: 0.538
risk_severity: "LOW"
fingerprint: "28810a170422f8f05593b0ab94eb5953d9d54a0b61ffb33637e10402972e9982"
input_schema_fingerprint: "0b7b25acb7a2c1cc1a981660be661b2abe67a3b08457e73c777240efe0f78e42"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
5{9}
name: "bsky_get_post_quotes"
title: "Get Bluesky Post Quotes"
effect: "READ"
effect_confidence: 0.888
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.889
1{2}
capability: "PERSONAL_DATA"
confidence: 0.538
risk_severity: "LOW"
fingerprint: "9ec5ae5b9bf10095c472fcf5d68e54d1baa9ec2e183e4ccd8b6fa251a719fb11"
input_schema_fingerprint: "4a79a9481b1515bae0714cd3b21eb95e3d27031bd4d0e49d4d20e7ead3e741b9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
6{9}
name: "bsky_get_post_thread"
title: "Get Bluesky Post Thread"
effect: "READ"
effect_confidence: 0.888
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.912
risk_severity: "INFO"
fingerprint: "28cf93bf5ece28806e2073dcf784988d98d30cbf9fbdf93af2372e98889800f0"
input_schema_fingerprint: "2ffc72f87e0b588c276bb18a79e8a2116a4fcdd96815f987ba082873c387d169"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
7{9}
name: "bsky_get_profile"
title: "Get Bluesky Profile"
effect: "READ"
effect_confidence: 0.776
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.8
1{2}
capability: "PERSONAL_DATA"
confidence: 0.91
risk_severity: "LOW"
fingerprint: "cc981506b363cfccc036a35a2305caf7db2267fda45e53a8c4da5b30ca8abf37"
input_schema_fingerprint: "4a78b0fae074815349ca49c47ef6db861d72ad229dc7bb9aaf316e2b52530580"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
8{9}
name: "bsky_get_trending"
title: "Get Bluesky Trending Topics"
effect: "READ"
effect_confidence: 0.888
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.539
risk_severity: "INFO"
fingerprint: "36cedcff11bb68328cae71648291efc43dd81d230f43bcec4a165e5024e94db2"
input_schema_fingerprint: "6c84d6d0fb239c997a0ab3ea089a25d43ecffb002c3b52f2424ba423fe0d8cfb"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: false
openWorldHint: true
9{9}
name: "bsky_search_actors"
title: "Search Bluesky Actors"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "f2c55c6b14525ad013abd8162c550b3bb677e28307e451882b2bea209566ff4e"
input_schema_fingerprint: "a2116db7df49298e1defdb77ecc648c18e792266e1e01c291fb849df99b89cab"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
10{9}
name: "bsky_search_feeds"
title: "Search Bluesky Feeds"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "c53b59359f5e73a613f4a892067e49986890b27d36101bf3746dba7bf0f4efa7"
input_schema_fingerprint: "c40f5a05b82dd1d8e5c8f97635eb612e4726da269fd22e8bf09aaf07262d49c3"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
resources[4]
0{4}
key: "bsky://profile/bsky.app"
kind: "resource"
mime_type: "application/json"
fingerprint: "023ab2525b5bf0c2d2e4c48f2a532b8fa3d9cb01cd8302acbca4cdc18f2a56ec"
1{4}
key: "skill://bluesky-guide/SKILL.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "fcc07ca6211924d00e49c1390054bc4bfe23f22cd8d2f33e1cf338ae77266d30"
2{4}
key: "bsky://profile/{actor}"
kind: "template"
mime_type: "application/json"
fingerprint: "b6a9f9030535a554ed53ddcf673d56254d9c1c9f2cbc015f36f426fee06646c2"
3{4}
key: "skill://{+path}"
kind: "template"
mime_type: null
fingerprint: "9777dc7f1cf468158c157032a0ccebf9b50270f4e8753af9ccaf2fe99890ccf0"
prompts[0]
extensions[1]
0: "io.modelcontextprotocol/skills"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "bluesky.caseyjhand.com"
registrable_domain: "caseyjhand.com"
source: "transport"
findings[8]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "HIGH"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "bsky_get_follows"
3{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "bsky_get_author_feed"
4{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "bsky_get_feed"
5{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "bsky_get_post_interactions"
6{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "bsky_get_post_quotes"
7{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "bsky_get_post_thread"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "partial"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "io.github.cyanheads/bluesky-mcp-server"
registry_content_sha256: "c240035d7ea3e83e1ff3353442bd12d57ebd0e95ebada0c1916f0453bd8f526f"
scan_snapshot_fingerprint: "b95267d249bb755bfed2ee4456d2f92e0324e3159eedaab67a8e350781b1d995"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T02:14:44.089Z"
observed_at: "2026-11-11T16:03:57.468+00:00"
registry_published_at: "2026-11-11T14:21:28.733339+00:00"
registry_updated_at: null